data protection policy

Website Privacy Policy

Date of Application: effective from 25/5/2018

Thank you for visiting the website of the company with the name“Kyprianidis Anastasios” (hereinafter referred to as the“Website“) located at 31 Philippou Street, Thessaloniki Center, TK 546 31, (hereinafter referred to as“the Company“).

Before using our Website, please read carefully this Privacy Policy (hereinafter“Policy“).

1. Introduction

The Company is committed to collecting and processing your personal data in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter“GDPR“). The Company, as the Data Controller, informs you of the way in which information about you is collected and processed, which is governed by the following terms and by the relevant provisions of the GDPR and the relevant Greek and European legislation on the protection of personal data.

Personal Data is any information relating to natural persons whose identity is known or can be verified (hereinafter“Personal Data“).

The protection of your Personal Data is very important to the Company, which takes measures in this direction.

This Policy sets out the type of information that our Company may collect from you and tells you how we use that information. When you voluntarily provide us with personal information, such as your name, address or email address, we use this information in strict confidence. Except as specifically provided in this Policy, no personal information is rented, sold, publicly posted or disclosed to other companies, organizations or websites.

This Policy applies to the collection and use of your personal information by the Company (e.g. information that identifies a specific person such as full name or email address).

2. What information we collect from you

In the course of our professional activity and operation of our Company, we collect the following Personal Data when you provide it to us:

• Your personal details & Contact details or details of persons nominated by you and of whom you have obtained explicit consent (name, surname, maiden name, first name, contact telephone numbers, contact address, email, activity/profession)
• Electronic identification data (where required during the provision of the Company’s services to you)
• Financial information (bank account numbers, credit card details and payment methods, VAT number, tax office)
• Health data (if required by specific shipping conditions of the products)
• Education level, work history/market training data when you submit your CV to us.
• When you visit the Company’s Website, we may collect personal data from you. This data may include your search history, IP address, screen resolution, the browser you used, operating system and settings, access times and your referring URL. If you use a mobile device, we may also collect data that identifies your device, settings and location.
• The Company reserves the right to collect non-personal identification data of users [browser type, type of computer, operating system, internet providers, etc.] and/or to monitor Internet Protocol addresses (IPAddress) using corresponding technologies (cookies). Cookies are small text files that are stored on each user’s hard drive without the user’s computer being able to access documents or files. They are used to facilitate user access when using specific services and/or pages of the Website, as well as for statistical purposes. For more information about the cookies used by the Website, users are requested to visit the Cookies Policy page.

3. How we collect your Personal Data

We collect your Personal Data directly from you in the following ways:

Directly from you:

• Through Print.
• By email.
• Via telephone calls.
• By fax.
• Through any kind of Sales/Service/Product/Product/Product/Labor Agreements that you sign with our Company.
• In the context of your expression of interest for the conclusion of sales contracts and for the provision of offers/services/products by our Company.
• Through our authorized employees/partners.
• By sending us your CV in order to apply for a job in the Company.
• If you are interested in contacting us via the contact form on the Website.
• By submitting data for registration on the online membership platform (registered customers).
• If you choose to subscribe to the Company’s newsletter.

By submitting your Personal Data to the Company, you consent to the use of such data in accordance with this Policy. Your Personal Data will not be used for any other purposes unless we obtain your permission, or unless required by law or professional standards.

4. Use – Disclosure of Personal Data

We use your Personal Data to respond to your requests in order to provide you with services and products, to keep you informed and to communicate with you on issues that interest you and concern you, such as offers, product catalogues, etc.

We do not disclose your Personal Data to third parties who are not affiliated with us, except as required for our legitimate professional and business needs, in order to respond to your requests and/or where required or permitted by law or professional standards and/or where we have your express consent to do so.

Also, your data, to the extent that this is appropriate for the fulfilment of our contractual obligations, your better service and the satisfaction of your requests, may be transferred to providers cooperating with the Company, such as consulting and auditing companies, any cooperating companies for storage and records management, cooperating IT companies, cooperating companies for printing, organisation and delivery of forms, transport companies and courier companies/ The Company in all of the above cases transfers your Personal Data if and only if the third parties meet our strict data processing and security standards and are required to act only on our instructions and are specifically authorised for this purpose, and if they are fully bound by the confidentiality and obligations provided for in the legislation on the collection and processing of the above data.

In addition, as provided by law, the Company may disclose your data to public authorities of any kind (including but not limited to public services, insurance funds, tax authorities, etc.) to judicial, public and independent authorities, such as but not limited to the “General Secretariat of Consumer Affairs” of the Ministry of Development and Competitiveness, the Independent Authority “Consumer Advocate”, competent ministries, prefectures, public authorities,

In the event of our reorganization or sale to another organization, the Company may also disclose Personal Data relating to the sale, assignment or other transfer of the business.

Furthermore, the Company may, if necessary, make disclosures of Personal Data when conducting audits related to the protection of Personal Data and security and/or for investigation or response to a complaint or security threat.

5. Transfers of Personal Data to Countries outside the EU and EEA.

We may transfer the Personal Data we collect from you to countries outside the country in which the Personal Data was originally collected. These countries may not have the same Personal Data protection laws as the country in which the Personal Data was originally collected. When we transfer your Personal Data to these other countries, we take appropriate measures to protect Personal Data in accordance with this Policy and all applicable data protection laws.

6. Legal Basis and Purpose of Use and Processing of your Personal Data.

The Company collects only Personal Data that is necessary in order to satisfy your requests in the context of its commercial activity and its general operation. Where additional, optional information is sought, you will be informed of this at the time of data collection. Under Greek and EU legislation (including the GDPR), we process Personal Data if we have a lawful basis to do so. Therefore, when we process your Personal Data, we rely on one of the following legal bases for processing:

• For the performance of a contract: Where the processing of your Personal Data is necessary for the fulfilment and compliance with our contractual obligations.
• Where we have a legitimate interest: we may process data about you where we have a legitimate interest in carrying out a lawful activity in order to ensure the continuation of that activity, as long as it does not affect your interests. Such a case may concern information about our Company’s products for which you have requested information from us and about our new products.
• Where there is a legal obligation: we are required to process your Personal Data in order to comply with a legal obligation, such as to keep records for tax purposes or to provide information to a public body or authority or to comply with other insurance, accounting or tax provisions.
• When we have your consent: we may occasionally ask you for specific permission to process some of your Personal Data, and we will only process your Personal Data in this way if you agree to this. You may withdraw your consent at any time by contacting the Company at info@electronpro.gr.

The Company collects “sensitive” personal data only when our data subjects voluntarily provide such data and have given their explicit consent to the processing or when the collection of such data is required by labour or social security laws. The concept of “sensitive” data includes Personal Data concerning a person’s race, nationality, political opinions, trade union membership, religious or similar beliefs, physical or mental health, sexual life.

7. Network and Information Security

The Company applies all reasonable and appropriate technical and organizational security measures to protect your Personal Data against unauthorized access, misuse, loss or destruction. Such measures include, where necessary, the use of firewalls, secure server installations, encryption, implementation of appropriate access rights systems and procedures, implementation of an access control policy, careful selection of processors and monitoring of compliance with the GDPR and other reasonable organisational and technical measures to provide adequate protection of your Personal Data, which are updated taking into account technological developments and the cost of their implementation.

All employees are bound by confidentiality and secrecy clauses and your Personal Data is processed only by specially authorized Company personnel.

8. Storage – protection of Personal Data

The Company has taken appropriate technical and organizational measures to ensure the security and protection of Personal Data in order to ensure the safe storage of Personal Data and to prevent accidental loss or destruction and unauthorized and/or unlawful access, use, modification or disclosure of Personal Data. Indicatively listed are:

1. physical security measures such as access control and logging, security policies, implementation of secure file destruction measures, installation of security locks, etc.
2. electronic security measures such as encryption, pseudonymisation, user access control of information systems, installation of security hardware and software, etc.
3. regular training and updating of authorised users
4. regular checks on the adequacy of safety systems.

Our data centers where your Personal Data is stored are located in Greece, where the Company’s data center is located and the backup location is located within the Company in a place that has all the necessary security measures. Also stored data are located in partner cloud service providers whose datacenters are located in Europe From the backup, a second copy is created in encrypted form which is stored in an external area with all security measures. If you need more information on protection measures you can contact tasarax@gmail.com

9. Retention period of Personal Data

Personal Data is kept for the period necessary to carry out and complete the processing purposes mentioned above, including the purposes of satisfying legal, accounting or information requirements, and to meet your needs, both in physical and electronic form. It is clarified that we will keep and process your Personal Data for as long as our contractual relationship lasts. In the event that the relationship is discontinued or terminated in any way, we will retain your data for as long as necessary until the limitation period for the relevant claims expires and in any case for as long as required by tax law, the applicable legal and regulatory framework and the approved codes of conduct. We will also retain your Personal Data when you contact us to submit a query for the entire period necessary to process your query. Where you have provided your consent for direct marketing communications, we retain your Personal Data until you remove your registration or request its deletion or after a period of inactivity determined in accordance with local regulations and guidelines. Please note that if there is a pending legal dispute between us beyond the above processing periods, we will keep your data until the legal case is settled by an irrevocable court decision. At the end of the retention period, the Personal Data are destroyed from the Company’s archives and information systems or anonymized so that it is no longer possible to identify you from them.

1. Your rights regarding the processing of Personal Data

Under the GDPR ( Articles 12-22 ) you have the following rights:

• Request a copy of your Personal Data.
• Withdraw your consent when this is the legal basis for processing your Personal Data.
• Request the correction of your Personal Data if it is inaccurate.
• Request the deletion of the Personal Data you have provided, subject to the requirements of the law.
• Request the restriction of processing, under the conditions set out in the law.
• Request the portability of your Personal Data if you provide the data yourself, the processing is based on consent or the performance of a contract and the processing is automated.
• Object to any form of processing of your Personal Data by us.

To exercise the above rights, you may contact the Company by e-mail: electronpro.gr or by mail or in person at the Company’s address at 31 Philippou Street, Thessaloniki, TK 546 31. In the event that one or more of the above rights are exercised, we will take all possible measures to satisfy the request within a reasonable period of time, but no later than one (1) month from the submission of the request and its identification. This period may be extended by a maximum of two (2) more months if the request is complex or if there is a large number of requests. The Company may retain the minimum necessary Personal Data to safeguard its legitimate interests.

Finally, each customer/user has the right to submit a query to the Company regarding the way of processing and protection of his/her Personal Data, and if he/she considers that any of his/her rights are violated, he/she has the right to complain to the Personal Data Protection Authority ( https://www.dpa.gr/, kissppou 31, P.C.546 31

, Thessaloniki, 2310230492).

1. Policy for children

Our company is committed to protecting the privacy of children. You should be aware that the content and services on this Website are not intended for children under the age of 16. No Personal Data should be submitted to the Company either through the Website or otherwise, by persons under the age of 16. If it comes to our attention that a person under the age of 16 has submitted Personal Data to the Company, without the express consent of the person exercising parental authority, we will immediately, upon notification or request, delete such data in accordance with our Company’s erasure policy.

2. Update CalOPPA Do-Not-Track

The Company does not track its users on third party sites and therefore does not respond to DoNotTrack (DNT) signals. The Company does not allow third parties to collect personal data directly from our users on our Website such as through the use of third party advertisements.

3. Changes to the Privacy Policy

The Company may amend this Policy. Please check the Application Date at the beginning of the Policy to see when it was last revised. Any revision will take effect as soon as we post the revised Policy.

If we make material changes to this Policy that expand our rights to use the Personal Data we have already collected from you, we will notify you and provide you with a choice about the future use of that data.